Library for Capabilities (linux-privs) Support

Edit Package libcap

Capabilities are a measure to limit the omnipotence of the superuser.
Currently a program started by root or setuid root has the power to do
anything. Capabilities (Linux-Privs) provide a more fine-grained access
control. Without kernel patches, you can use this library to drop
capabilities within setuid binaries. If you use patches, this can be
done automatically by the kernel.

Refresh
Refresh
Source Files
Filename Size Changed
baselibs.conf 0000000016 16 Bytes
libcap-2.69.tar.sign 0000000833 833 Bytes
libcap-2.69.tar.xz 0000189200 185 KB
libcap.changes 0000026925 26.3 KB
libcap.keyring 0000015396 15 KB
libcap.spec 0000004743 4.63 KB
Latest Revision
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1087357 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 59)
- updated to 2.69
  - An audit was performed on libcap and friends by https://x41-dsec.de/ (blog) . The audit (final report, 2023-05-10) was sponsored by the the Open Source Technology Improvement Fund, https://ostif.org/ (blog). Five issues were found. Four of them are addressed in this release. Each issue was labeled in the audit results as follows:
    - LCAP-CR-23-01 (SEVERITY) LOW (CVE-2023-2602) - found by David Gstir (bsc#1211418)
    - LCAP-CR-23-02 (SEVERITY) MEDIUM (CVE-2023-2603) - found by Richard Weinberger (bsc#1211419)
    - LCAP-CR-23-100 (SEVERITY) NONE
    - LCAP-CR-23-101 (SEVERITY) NONE
    - LCAP-CR-23-102 (SEVERITY) NONE
  - Man page style improvement from Emanuele Torre (forwarded request 1087355 from msmeissn)
Comments 1

Ilgaz Öcal's avatar

This library is problematic on current openSUSE TW, it doesn't install and when I try to build from rpm source:

Checking for unpackaged file(s): /usr/lib/rpm/check-files /home/ilgaz/rpmbuild/BUILDROOT/libcap-2.64-84.121.x86_64 error: Installed (but unpackaged) file(s) found: /usr/lib64/security/pam_cap.so

RPM build errors: Installed (but unpackaged) file(s) found: /usr/lib64/security/pam_cap.so

openSUSE Build Service is sponsored by